The fix in MDL-24863 to validate field names in where_clause() has caused the show_entries.php page to break.
Line 209 of mod/feedback/show_entries.php contains a space in the userid field within the where clause, ie. " userid" instead of "userid".